Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft
File: 3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft (raw, json)
Hash identifier: 3UOGGJmiskZdsAKfoy5jeB/uDsRaNK93Jz2QeVPom04=
Subject key identifier: F2:8A:30:4D:CE:E5:98:C3:59:FD:1E:60:01:C2:C3:30:07:CC:03:44
Authority key identifier: DE:A2:D0:26:0C:17:09:51:67:E1:E3:BC:D6:59:89:FE:76:47:CB:6A
Certificate issuer: /CN=A91AE6B9/serialNumber=DEA2D0260C17095167E1E3BCD65989FE7647CB6A
Certificate serial: 0C13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft
Manifest number: 0C0C
Signing time: Fri 31 Jan 2025 18:24:05 +0000
Manifest this update: Fri 31 Jan 2025 18:24:03 +0000
Manifest next update: Fri 07 Feb 2025 18:24:03 +0000
Files and hashes: 1: 3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl (hash: P82dzP+rih7ngocLspwetfjlJyrsa7oLkxinqAnAvwc=)
2: D91746DE044F11EA8C37D012C4F9AE02.roa (hash: alyiVZNnvo5j+FeNDvZT50h35M8ryhRQyKsBnyLFnkg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3091 (0xc13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE6B9/serialNumber=DEA2D0260C17095167E1E3BCD65989FE7647CB6A
Validity
Not Before: Jan 31 18:24:03 2025 GMT
Not After : Feb 7 18:24:03 2025 GMT
Subject: CN=679d1544-4739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d8:e3:79:3b:9c:fe:db:0d:c8:bd:09:8f:ad:
4b:e3:3c:e6:71:39:d9:dc:13:21:24:b6:ec:4f:b6:
2e:97:57:87:c6:50:85:ab:1b:c8:9d:65:bc:06:bb:
9e:89:fa:03:f4:74:0c:86:d0:8a:82:3f:da:4e:07:
78:a3:99:6b:1e:5c:ba:67:4b:23:35:e2:b4:6f:c0:
42:32:70:b0:d6:53:ed:ae:29:c2:0c:b6:d8:13:d6:
a2:06:ce:4d:d9:9a:06:b9:8e:00:5f:64:c8:f6:85:
48:c1:8c:d3:5f:53:a8:fd:51:0b:e2:aa:4f:64:e0:
07:10:7d:3b:59:f7:8f:82:d7:6e:b4:cb:bf:8f:73:
9d:89:0b:2e:4c:35:49:86:00:10:c4:fb:f4:f6:59:
09:a0:a5:c1:5c:3c:80:05:98:2e:32:6e:d9:3f:42:
06:2b:9f:2e:b3:ea:ae:3e:b0:b4:c8:68:8a:96:e7:
53:4b:05:14:e0:14:23:d8:f0:44:71:0d:cd:ea:a3:
86:71:7c:8a:8f:44:3e:b0:cb:cd:2e:fe:ad:47:aa:
ec:12:2c:98:a8:c1:e0:0b:3b:a0:cd:05:e2:79:19:
76:09:f1:15:46:54:13:a8:5c:92:18:1d:fb:f6:39:
f6:97:9c:27:6b:31:9f:02:93:99:76:90:1d:98:7f:
d5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:8A:30:4D:CE:E5:98:C3:59:FD:1E:60:01:C2:C3:30:07:CC:03:44
X509v3 Authority Key Identifier:
keyid:DE:A2:D0:26:0C:17:09:51:67:E1:E3:BC:D6:59:89:FE:76:47:CB:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:5e:6d:16:3b:fc:40:21:9b:51:cf:ad:36:fb:4a:83:d7:67:
99:d9:08:8d:a3:62:f9:49:92:da:04:94:06:96:2f:23:09:2a:
6b:b4:2c:aa:b7:e7:d6:55:c4:b0:df:9f:44:8d:5f:ab:c4:78:
be:60:f6:d3:1a:28:19:de:08:d4:3f:06:43:15:45:b1:29:66:
52:27:5a:49:9d:24:ca:49:31:df:61:14:2c:1c:72:c5:c0:02:
89:05:03:d8:9b:55:c3:5b:e4:90:61:f2:86:fc:d0:24:da:37:
7e:3d:78:db:e3:40:df:8c:b7:09:c3:47:f3:f1:b2:6f:cc:05:
1c:6a:2f:78:70:93:84:07:86:13:a6:8f:9b:34:8a:4a:13:b0:
20:d5:e1:83:7b:8b:b4:a8:f0:cd:34:55:5d:ac:40:6d:e4:77:
9f:b5:64:8e:6c:f8:0c:09:f1:e7:21:bb:d1:d6:81:03:5a:d8:
93:63:a1:39:96:b0:30:46:32:34:97:40:b9:5b:95:5f:58:2b:
6d:d3:8b:c3:d2:69:d4:0e:a0:d2:90:4c:b9:75:d1:8f:7f:0e:
51:2c:98:9f:b4:98:7f:cf:05:fd:a9:6a:3f:4c:06:ba:34:94:
ed:00:a1:06:ce:21:48:6c:9b:c0:eb:ed:61:11:3c:15:9a:48:
74:cd:02:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:38:47 2025 by rpki-client